Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oWl5UtsH4K4uJRnZu8B79Q-TKfg.roa
File: oWl5UtsH4K4uJRnZu8B79Q-TKfg.roa (raw, json)
Hash identifier: BmPNOYSfG4p9nTIFRkxNzSPZ+HBTj7rM+hpLuUCSML8=
Subject key identifier: A1:69:79:52:DB:07:E0:AE:2E:25:19:D9:BB:C0:7B:F5:0F:93:29:F8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0671
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oWl5UtsH4K4uJRnZu8B79Q-TKfg.roa
Signing time: Thu 15 May 2025 16:08:04 +0000
ROA not before: Thu 15 May 2025 16:08:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1649 (0x671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 16:08:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A1697952DB07E0AE2E2519D9BBC07BF50F9329F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:08:df:a9:b1:cd:d8:5a:3c:83:d7:7e:db:
b6:51:f8:16:84:f5:eb:12:35:a1:d4:7c:e9:b3:80:
b1:f3:9b:43:d3:59:73:d3:d3:d5:43:2c:07:c1:19:
ff:92:10:0f:60:3f:6e:b6:14:e9:bb:38:61:da:f2:
93:37:79:bc:b9:5a:b4:77:94:95:c6:23:d0:ca:40:
cd:e0:f4:ef:21:97:c7:8b:16:3b:ec:b8:4f:c8:45:
d2:27:0d:24:aa:93:5f:36:5e:b6:45:cd:15:aa:d8:
47:00:22:9b:8f:c9:db:5c:89:4c:e7:fb:db:f6:b9:
ce:73:ff:ee:56:d8:42:a0:75:db:f9:1e:de:d4:cf:
58:29:08:72:d3:5c:3d:1b:90:53:b4:1c:5d:e1:bb:
7c:4b:61:ae:0a:ec:1c:dc:3e:b1:23:cf:b5:d1:09:
49:dd:25:8a:45:5c:2e:ce:80:f0:7d:f6:86:67:4f:
6c:0e:b0:dc:98:96:c5:0b:a5:e9:90:bb:ac:e9:a5:
67:28:99:49:07:c1:e8:80:9c:48:a7:8e:a5:cd:0b:
c8:a6:a1:87:d1:9f:5d:7f:a6:ab:8b:eb:1b:d8:c7:
f3:97:d2:ec:46:89:70:d1:ef:9c:44:d9:cd:c8:73:
9b:92:b4:88:8d:91:af:59:d1:0e:15:0b:0c:61:da:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:79:52:DB:07:E0:AE:2E:25:19:D9:BB:C0:7B:F5:0F:93:29:F8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oWl5UtsH4K4uJRnZu8B79Q-TKfg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:57:1b:a3:78:d5:fa:0e:40:b8:63:85:08:ce:1a:a7:59:f5:
0e:f8:22:8f:1f:1f:d7:4e:c5:f9:81:a0:db:36:52:7f:59:32:
7b:0e:07:9d:1f:63:e8:3d:b2:16:7d:a0:96:f4:63:00:ae:90:
74:4d:18:3f:a4:e4:2e:11:eb:61:08:21:23:b9:32:d6:0e:30:
7f:91:b6:70:32:27:df:31:b6:29:9a:cc:07:71:74:27:2c:bf:
75:23:20:14:4e:60:dd:64:09:72:c0:60:8a:c0:c0:d0:e8:4f:
b0:6d:f9:9f:cb:92:3d:e7:7c:98:94:af:34:63:0a:7c:c4:3d:
5d:48:13:e7:5f:9f:c9:17:21:90:a7:cc:ac:45:e9:b2:e4:d5:
14:27:e1:d5:7f:a4:34:17:fe:2b:33:a3:42:6e:15:1e:28:b4:
4f:7d:b1:1b:49:c0:55:fe:44:b7:4f:5c:c2:75:44:3b:e8:62:
e8:d7:f8:a4:60:77:9d:ab:de:3f:72:dd:ba:c3:25:4c:30:9f:
09:e6:df:eb:1b:d6:76:76:9d:a1:0b:3c:6a:43:68:0b:d6:f7:
a8:e0:7d:6d:0f:d0:b1:26:53:e3:aa:1c:3a:86:2f:4d:60:a7:
84:f5:16:2b:a0:dd:4b:b0:94:d3:c5:3a:1f:2f:e1:fa:15:33:
8b:58:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 19:53:34 2025 by rpki-client